KBI 310751 User Privileges Required To Execute Argent for SQL Server Rules

Version

Argent Advanced Technology all versions

Date

Tuesday, 19 Nov 2013

Summary

Only customers with specific privileges can successfully execute Rules under Argent for SQL Server

Technical Background

Following are the details of privileges required for each Rule in Argent for SQL Server:

SQL Server Performance Objects

Use of the SQL Server performance objects depends on Windows permissions, except SQLAgent:Alerts

Users must be a member of the sysadmin fixed server role to use SQLAgent:Alerts objects

Database Size Rule

To run this Rule, SQL login must be a member of the public fixed server role and the user mapped to this login in the database must be a member of db_owner fixed database role

Transaction Log size Rule

To run this Rule, SQL login must be a member of the public fixed server role and the user mapped to this login in the database must be a member of db_owner fixed database role

Concurrent User Rule

To run this Rule, SQL login must be a member of the public fixed server role and the user mapped to this login in the database must be a member of the public fixed database role

SQL Lock Rule

To run this Rule, SQL login user must be a member of the sysadmin fixed server role

SQL Deadlock Rule

This Rule requires VIEW_SERVER_STATE permission on the server

Database Backup Rule

To run this Rule, SQL login must be a member of the public fixed server role and the user mapped to this login in the database must be a member of the public fixed database role

Database Integrity Check

This Rule requires membership in the sysadmin fixed server role or the db_owner fixed database role

Custom SQL Query Rule

Privilege requirement is depends on SQL query specified

SQL Processor Rule

This Rule requires membership in the sysadmin fixed server role

IO Usage Rule

This Rule requires membership in the sysadmin fixed server role

Query Blocked Process Rule

To run this Rule, SQL login must be a member of the public fixed server role and the user mapped to this login in the database must be a member of the public fixed database role

Query Runaway Process Rule

To run this Rule, SQL login must be a member of the public fixed server role

Runaway Query Rule

This Rule requires VIEW_SERVER_STATE permission on the server

Blocked Query Rule

This Rule requires VIEW_SERVER_STATE permission on the server

SQL Job Rule

To run this Rule, SQL login must be a member of the public fixed server role and the database ‘msdb‘ requires ‘SQLAgentReaderRole‘ privilege

Average Fragmentation In Percent Rule

This Rule requires VIEW_SERVER_STATE permission on the server.

Offline Database Rule

To run this Rule, SQL login must be a member of the public fixed server role and the user mapped to this login in the database must be a member of the public fixed database role

Database Statistics Update Due Rule

To run this Rule, SQL login must be a member of the public fixed server role and the user mapped to this login in the database must be a member of the public fixed database role

Log Shipping Rule

To run this Rule, SQL login must be a member of the public fixed server role and the user mapped to this login in the database must be a member of the datareader fixed database role

Security Rule

This Rule requires ALTER TRACE permission on the server

Resolution

N/A